Accounts Based on Affiliation

Accounts and Authentication Methods

Active Directory (AD) Accounts

What is it:

An OIT Active Directory (AD) account's username and password is always the same as your CU Login Name and IdentiKey password. It synchronizes automatically. So if you change your IdentiKey password, your AD password changes as well.

Often times, AD accounts are placed in AD groups managed by an administrator. Your membership of an AD group can sometimes determine your ability to access a service that uses AD authentication.

Who gets it:

Those that are accessing AD authenticated resources like OIT's Exchange service, OIT's file storage service, or work in an OIT managed environment.

When you get it:

Your account is ready for you if you ever start using a service like Exchange, file storage, or you're computer is part of an OIT managed environment.

Manage it:

AD accounts are automatically synchronized with IdentiKey accounts. The only way to change your AD password is to change your IdentiKey password, using Identity Manager.

If you are an in OIT managed environment, you cannot change your AD password via the CTL-ALT-DEL function at the login screen. Al AD, therefore IdentiKey, password changes have to be made in Identity Manager.

If you have questions about your AD account or your ability to access particular OIT services that use AD authentication, contact the IT Service Center.

E-mail and Calendar Service

CU-Boulder faculty, staff, and students receive a CU-Boulder email account, with a first.last@colorado.edu email address. Email is an official means of communication at CU-Boulder. They also have access to calendar service.

Learn more about IdentiKey, including when you get it and how to activate it.

ListProc Lists

What is it:

ListProc is a program that runs on the OIT system lists.colorado.edu. This software allows subscribers to send messages to email lists, which local list owners manage themselves.

ListProc list owners will see their lists show up as a secondary account inside of Identity Manager. While it may be listed there, it is only for your information. The list itself and it's associated passwords cannot be managed inside of Identity Manager. Likewise, you cannot activate a list on the "Activate My Secondary Accounts" page inside of Identity Manager.

OIT provisions a PIN (4-digit alphanumeric code) to students that do not provide Social Security Numbers to the university. This PIN is used in conjunction with other personal information to activate IdentiKey accounts in Identity Manager. Students receive their PIN via email from OIT to the email address listed with the Admission’s office. For PIN inquiries, contact the IT Service Center.

Research Computing - One-Time Password Authentication

Learn about the One-Time Password Authenticator used to provide access to the Janus High Performance Computer

Specialty Account Creation (SAC)

What is it:

Specialty Account Creation (SAC) is a web tool that students, faculty, and staff use to create specialty accounts on servers they have been granted access. These servers are not centrally managed by OIT, but by other departments.

Who gets to use the tool:

Only faculty, staff, or students that have been granted access by an administrator. If you are required to use a specialty account for a course or to access a specific resource, you will be instructed to do so. If not, this tool is not for you.

After selecting the host, you will enter your CU Login Name and IdentiKey password to create your account.

Your account's credentials will be the same as your IdentiKey, at the time of creation. If you ever change your IdentiKey password, you need to return to this tool and follow the steps above to synchronize your specialty account with your IdentiKey password.

Spot.colorado.edu, rintintin.colorado.edu and other OIT Unix based servers

Some CU-Boulder faculty, staff, and students utilize other OIT servers such as spot.colorado.edu and rintintin.colorado.edu for email and/or web page hosting. Email can be accessed through an email program such as Outlook, or through a secure terminal program called Pine. Learn more about about these accounts.